D47 / R-1269 (P2): a new install never writes into an earlier install's backup — every install has an identity (install_id), the unit records it, every unit writer asks first; another install's unit is set aside whole (backups/set-aside/<app>/<stamp>, a D25 kept copy, „Visszaállítás” + „Eltávolítás” on the restore page); a move that fails refuses the write. Red-proved. Commit only.

2026-10-25 09:27:48 +01:00
parent e1613aea8d
commit 02daebe9c5
30 changed files with 1990 additions and 17 deletions
@@ -259,6 +259,7 @@ type Manager struct {

 	// Migration engine (B1): single-flight + live job + deps wired via SetMigrationDeps.
 	migrateMu     sync.Mutex
+	installIDMu   sync.Mutex // D47: one EnsureInstallID at a time (two backups racing must not mint two ids)
 	migrating     bool
 	migJob        *MigrationJob
 	settings      *settings.Settings